Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d6ecf42-e5e6-3d0c-be22-fe9f0c794ad6.roa
File:                     5d6ecf42-e5e6-3d0c-be22-fe9f0c794ad6.roa (raw, json)
Hash identifier:          3rVgxSW/LFrgQ4Gq0Hau+Z95wq9vTHVCkwl+m+eHRzQ=
Subject key identifier:   DA:18:CB:24:76:1A:5B:44:7F:24:B4:1F:48:82:60:BB:46:7B:92:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290B03DEF89FAF94D6B0A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d6ecf42-e5e6-3d0c-be22-fe9f0c794ad6.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100e:bf14::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b0:3d:ef:89:fa:f9:4d:6b:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=cadf3f59-1772-481c-9b48-60a34bfc5068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:35:83:9f:49:fc:cb:6d:8b:05:cd:5c:7d:10:
                    f5:84:3f:af:71:1c:0d:87:45:80:be:24:ea:03:c5:
                    ce:ae:cb:bb:6f:7f:36:f6:59:98:b5:ff:20:c7:0d:
                    35:28:4a:d9:f1:02:16:63:bd:09:8d:bd:9e:25:fb:
                    0b:5f:47:20:49:8b:5d:80:e3:d7:32:d7:7c:3a:1d:
                    ec:e2:41:6a:a1:c0:86:c0:1e:b5:83:2b:f2:6d:60:
                    eb:c3:98:a2:85:0c:db:42:df:e8:5a:33:20:e1:fc:
                    11:48:c1:60:73:12:60:d8:94:c3:ec:d0:e2:97:ba:
                    3f:99:67:53:94:b9:3e:ee:25:44:ee:f4:bc:f7:80:
                    fa:75:a5:6e:11:d4:48:3f:0c:d0:91:08:cd:f8:b9:
                    f7:57:dc:22:7a:f8:df:cb:2d:27:6f:b9:94:fd:e2:
                    5a:17:b1:e7:eb:92:57:28:bb:b8:50:44:73:3c:d9:
                    93:8f:b1:b2:c1:d8:10:1c:4c:d6:99:cc:65:a3:17:
                    12:70:54:c2:17:ed:09:f4:89:44:39:70:79:e1:cf:
                    c4:80:4c:1b:8e:a0:3b:3a:40:f5:02:8a:eb:4a:54:
                    d4:52:1b:45:8a:3a:87:8b:9f:3b:7d:ac:b8:bf:03:
                    1b:d6:80:db:88:7d:6e:71:de:27:e4:a2:0f:a8:4b:
                    54:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:18:CB:24:76:1A:5B:44:7F:24:B4:1F:48:82:60:BB:46:7B:92:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d6ecf42-e5e6-3d0c-be22-fe9f0c794ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:bf14::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ef:c9:c3:6d:83:4e:73:54:72:be:a2:3b:88:f6:f5:20:03:
         9f:2a:27:a2:04:71:6e:d2:19:d8:83:58:69:4b:c0:0c:8f:31:
         85:a6:3f:73:33:92:37:5f:a3:61:22:3b:d0:03:73:3a:1d:de:
         90:a9:92:fe:5d:88:81:b0:9c:58:fd:fc:08:db:f7:aa:8e:c9:
         09:7f:56:2f:2c:3b:6f:c5:4a:3c:fe:7d:d1:96:4b:1c:95:24:
         3a:0b:3d:e7:85:b7:0b:73:38:fb:8b:36:db:b7:42:18:1d:65:
         f2:a2:f6:13:40:1c:cb:ed:9c:0f:a9:b1:7a:41:d8:14:21:cb:
         76:5d:d7:2f:56:2b:31:d7:37:14:52:0a:60:2a:16:e5:ab:1c:
         51:33:bf:3c:56:60:7a:c9:70:3a:29:be:62:7e:d4:23:68:d2:
         ed:3d:0b:1e:7d:b5:5e:33:a8:44:3f:e8:7f:dd:2a:3f:4e:6b:
         ab:97:b5:35:d4:c4:af:8c:3a:47:42:d3:e7:6c:91:47:1e:49:
         f7:de:90:30:2b:d6:8f:29:6f:fd:b0:6c:64:11:21:5c:85:d5:
         05:0f:6d:ad:a2:5d:7f:05:2f:aa:f3:b7:b7:75:0e:a9:ab:8d:
         f8:23:a3:78:63:e6:ff:86:90:1e:55:b0:fa:ef:c7:f6:57:34:
         18:ea:aa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:58:29 2025 by rpki-client